Virtual CISO
Senior security leadership without the full-time hire.
A Chief Information Security Officer costs $180,000+ per year in NZ — and that's before you can find one (Source: SEEK NZ salary data — seek.co.nz). A KIS virtual CISO gives you experienced, strategic security leadership on a flexible basis. They'll own your security programme structured around NIST CSF 2.0's Govern function, advise your board, and guide your path toward ISO 27001 if that's your goal.
What's included- Dedicated vCISO assigned to your account
- Security strategy and annual roadmap (NIST CSF 2.0 Govern framework)
- Board and executive-level reporting and briefings
- Vendor and supplier security evaluation
- Policy development and governance oversight
- Regulatory and compliance guidance — NZ Privacy Act 2020, NZISM, NIST CSF 2.0, ISO 27001
- Escalation point during incidents
Who the vCISO is right for
Growing SMBs
Scaling fast and security needs to keep pace — but a full-time CISO isn't in the budget yet.
Mid-market businesses
An IT team but no dedicated security leadership. The vCISO bridges that gap strategically.
Boards & leadership teams
Need someone to translate cyber risk into business language — and be accountable for it.
The vCISO uses NIST CSF 2.0 as the primary strategic framework and guides your path to ISO 27001 certification. Typically 1–3 days per month of dedicated time, depending on your needs.